gz0407 发表于 2009-8-6 10:32:53

谁来帮助破解这台RG-100A-AA的超级用户名和密码

  http://z.alimama.com/alimamal.php?i=mm_10064262_699567_1307429&w=250&h=60&re=1024x768&sz=13&cg=c1dece416014b4e5fa8766530fa93109&pro=66020681&cas=pro&cah=738&caw=1024&ccd=32&ctz=8&chl=0&cja=1&cpl=0&cmm=0&cf=10.0&u=http%3A%2F%2Fwww.chinadsl.net%2Fbbs%2Fthread-36857-1-1.html&r=http%3A%2F%2Fwww.chinadsl.net%2Fbbs%2Fmy.php%3Fitem%3Dthreads%26srchfid%3D2&sx=700&sy=317&cbw=1007&cbh=8919


谁来帮助破解这台RG-100A-AA的超级用户名和密码

我的宽带终端上海贝尔RG-100A-AA是一台被控的产品,现从相关网页文件中捕获如下信息,恳请各路高手帮助破解出相应的超级管理员及密码,在此先谢了。如破解成功,烦请回复:gaozhongdyx@qq.com,万分感谢。信息如下:
<html>

<head>

<meta HTTP-EQUIV='Pragma' CONTENT='no-cache'>

<meta http-equiv='Content-Type' content='text/html; charset=gb2312'>

<link rel="stylesheet" href='stylemain.css' type='text/css'>

<link rel="stylesheet" href='colors.css' type='text/css'>

<script language="javascript" src="util.js"></script>

<script language="javascript">
<!-- hide

pwdAdmin = 'nE7jA%5m';
pwdSupport = 'support';
pwdUser = 'nnidg';
var user ='useradmin';
var usrUserName = 'useradmin';
var sysusername ='telecomadmin';

function btnAcctChg()
{

var loc = 'ctAcctChg.cgi';


with ( document.forms )

{

var code = 'location="' + loc + '"';

eval(code);

}
}

function btnApply() {

var loc = 'password.cgi?';


with ( document.forms ) {




if ( user != sysusername)

{

if ( oldusername.value != usrUserName )


{


alert("旧的用户名是错误的.");


return;


}





if ( pwdOld.value != pwdUser )


{


alert("旧的用户密码是错误的.");


return;


}


}



var stroldusername = new String();

var strusername = new String();



if(user == sysusername)

{

stroldusername = oldusername.value;

if ( stroldusername.length > 16 ) {

alert('输入的原用户名不应大于16个字符.');


return;

}

strusername = username.value;

if ( strusername.length > 16 || strusername.length < 1) {

alert('用户名不应大于16个字符和小于1个字符.');

return;

}

if ( strusername.indexOf(' ') != -1 ) {

alert('用户名不能包含空格.');

return;

}

if(sysusername == username.value) {

alert("不能修改用户名为系统管理员名.");

return;


}

if(isIncludeInvalidChar( username.value)){

alert("新用户名含有非法字符,请重新输入!");

return;

}


}


if ( pwdNew.value != pwdCfm.value ) {


alert("密码不匹配.");

return;

}



if(isIncludeInvalidChar(pwdCfm.value)){

alert("新密码含有非法字符,请重新输入!");

return;


}

var str = new String();

str = pwdNew.value;

if ( str.length > 16 ) {

alert('密码不应大于16个字符.');


return;

}

if ( str.indexOf(' ') != -1 ) {

alert('密码不能包含空格.');

return;

}


if ( user == sysusername) {


loc += 'usrUserName=' + encodeUrl(username.value);


loc += '&usrPassword=' + encodeUrl(pwdNew.value);

} else

{

loc += 'usrUserName=' + user;

loc += '&usrPassword=' + encodeUrl(pwdNew.value);

}


var code = 'location="' + loc + '"';

eval(code);

}
}

function frmLoad()
{

with ( document.forms ) {

if ( user
== sysusername)

{

oldusername.readOnly=true;

oldusername.value = usrUserName;

username.value = usrUserName;

}

}
}

// done hiding -->
</script>

</head>

<body
onLoad="frmLoad()">

<blockquote>

<form>

<b>访问控制 -- 密码</b><br><br>
<script language="javascript">

var selectcnc = 'no';

if(selectcnc == "no"){


if ( user == sysusername )

document.write("访问路由器是通过两个用户名来控制: telecomadmin和useradmin。<br><br>\


用户名\"telecomadmin\"可以不受限制的浏览和修改您的DSL路由器。<br>\


<br>\


用户名\"useradmin\"可以访问DSL路由器,浏览配置和统计表。<br>\


<br>\


使用下面的区域输入最大16个字符,然后点击\"保存/应用\"来改变或创建密码。
注意:密码不能含空格。<br>\


");

}else{

if ( user == sysusername )

document.write("访问路由器是通过两个用户名来控制: cncadmin和user。<br><br>\


用户名\"cncadmin\"可以不受限制的浏览和修改您的DSL路由器。<br>\


<br>\


用户名\"user\"可以访问DSL路由器,浏览配置和统计表。<br>\


<br>\


使用下面的区域输入最大16个字符,然后点击\"保存/应用\"来改变或创建密码。
注意:密码不能含空格。<br>\


");

}


</script>

<br>

<table border="0" cellpadding="0" cellspacing="0">

<script language="javascript">


if ( user
== sysusername)

{

document.writeln("<tr>\n");



document.writeln("<td width=\"120\" height=\"23\">原用户名:</td>\n");


document.writeln("<td><input name='oldusername' type=\"text\" size=\"20\" maxlength=\"16\"></td>\n");


document.writeln("</tr>\n");


document.writeln("<tr>\n");




document.writeln("<td width=\"120\" height=\"23\">新用户名:</td>\n");


document.writeln("<td><input name='username' type=\"text\" size=\"20\" maxlength=\"16\" ></td>\n");


document.writeln("</tr>\n");


}


if ( user
!= sysusername)

{

document.writeln("<tr>\n");



document.writeln("<td width=\"120\" height=\"23\">原用户名:</td>\n");


document.writeln("<td><input name='oldusername' type=\"text\" size=\"20\" maxlength=\"16\"></td>\n");


document.writeln("</tr>\n");




document.writeln("<tr>\n");

document.writeln("<td>旧密码:</td>\n");

document.writeln("<td><input name='pwdOld' type=\"password\" size=\"20\" maxlength=\"16\"></td>\n");

document.writeln("</tr>\n");


}


</script>

<tr>

<td>新密码:</td>

<td><input name='pwdNew' type="password" size="20" maxlength="16"></td>

</tr>

<tr>

<td>确认密码:</td>

<td><input name='pwdCfm' type='password' size="20" maxlength="16"></td>

</tr>

</table>

<br>

<left></left> <right>
<input type='button' onClick='btnApply()' value='保存/应用'></right>

</form>

</blockquote>


</body>
</html>

lingvn 发表于 2009-8-6 10:48:02

教程区好好学习,都有的。顺便赚俩猫粮

plzgogame 发表于 2009-8-6 14:15:45

楼上是正解

armboy520 发表于 2009-8-8 12:36:51

很容易的不过不要惊慌。也许你刷了后什么帐号密码都不行,但是我遇到这样情况我搞好了

yz994 发表于 2010-3-11 10:21:00

还是不懂,不知的怎么更啊

doop 发表于 2010-5-14 01:00:38

真的有吗???

gdhnwk 发表于 2010-8-8 15:23:17

你的代码已经写了,只是你看不懂

pwdAdmin = 'nE7jA%5m';
pwdSupport = 'support';
pwdUser = 'nnidg';
var user ='useradmin';
var usrUserName = 'useradmin';
var sysusername ='telecomadmin';

超级用户名:telecomadmin,密码:nE7jA%5m,登录地址:http://192.168.1.1/cnc.html
页: [1]
查看完整版本: 谁来帮助破解这台RG-100A-AA的超级用户名和密码